Version 2027-1 · Persatuan Lawn Bowl Malaysia (PLBM) · Bahasa Melayu
The Malaysian Lawn Bowls Association (PLBM) runs the Passport ORKID school programme. This notice explains what personal data we collect about participating students (many of them under 18), why, and your rights under the Personal Data Protection Act 2010 (as amended).
Student: name, date of birth, gender, school and class, attendance, skill test results, points, badges and competition results; optional special-needs/para class information (sensitive, collected only with explicit consent). Guardians: name, relationship, phone and email. Users: name, email, phone, sign-in history.
To run the programme, track progress and continuity, award recognition, report aggregate results to the funder (ORKID) without identifying students, and keep the system secure. Optional uses need separate consent: photos/media, AI-assisted progress reports (de-identified data only), medical and travel information.
For students under 18, a parent or guardian gives and may withdraw consent at any time through the school or PLBM. Withdrawing AI-report or photo/media consent takes effect immediately.
Access is limited by role and scope (school, state, national). The funder sees aggregated figures only; small groups are hidden. Service providers that process data for us (hosting, optional AI) are listed in our processor register, including any processing outside Malaysia.
Records of students who leave are anonymised after the retention period (default 5 years) unless a legal hold applies; aggregate statistics are kept. Data is protected by access control, encryption of secrets, audit logging and backups.
You may ask to access, correct, or request erasure of your child's data, or withdraw consent. We respond within 21 days. Contact your school administrator or the PLBM Data Protection contact (to be confirmed by PLBM). Complaints may be made to the Personal Data Protection Commissioner.
Draft for legal review before launch.
Back